CVE-2018-2425: High severity sap business one license service api vulnerability
Published Jun 12, 2018
·Updated
Under certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an attacker to access information which would otherwise be restricted.
Affected Software
2 affected components
SAP Business One Sap Hana=9.2
SAP Business One Sap Hana=9.3
Event History
Jun 12, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-2425?
The severity of CVE-2018-2425 is high.
2
What is affected by CVE-2018-2425?
SAP Business One versions 9.2 and 9.3 for SAP HANA backup service are affected by CVE-2018-2425.
3
How can an attacker exploit CVE-2018-2425?
Under certain conditions, an attacker can exploit CVE-2018-2425 to access restricted information through the SAP HANA backup service in SAP Business One 9.2 and 9.3.
4
Is there a fix available for CVE-2018-2425?
Yes, SAP has released fixes for CVE-2018-2425. Please refer to the SAP notes for more information.
5
Where can I find more information about CVE-2018-2425?
You can find more information about CVE-2018-2425 on SecurityFocus, SAP Support Launchpad, and the SAP Community Network.